lei-search

SUSPICIOUS. The skill’s purpose is coherent, but its footprint is riskier than a simple LEI lookup: it uses a third-party gateway instead of the official LEI API, supports automated off-chain payment with a plaintext private key, and may download and run an unpinned helper script. This looks more like a monetized API wrapper than pure LEI search, so the main concerns are supply-chain trust, credential exposure, and financial authorization rather than confirmed malware.